Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: XHIRRRCpBc32JAONLVRWMp0dEhWcWaW/8OtXeBVgBnk=
Subject key identifier: 49:4A:01:BD:B8:01:52:47:87:F7:99:D2:28:F1:45:EE:4D:32:CF:3A
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019D26280BB4CC003DB695C708CD3FF1C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0DF3
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=)
2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: +w7XJcQ9KVHyQbPEVhcDBTesRpBLPKyiaml3LfIRJfI=)
3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0b:b4:cc:00:3d:b6:95:c7:08:cd:3f:f1:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=494a01bdb801524787f799d228f145ee4d32cf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:d2:d9:86:8d:6a:2a:c5:ad:5a:e1:c9:11:
c5:68:ca:75:01:84:77:bf:93:f4:df:3e:8d:9b:63:
10:45:93:bc:3d:e1:7d:09:6e:f3:26:99:aa:b2:b0:
5b:de:72:f2:3b:d7:b4:ff:e6:74:b3:c7:d5:91:ca:
02:eb:55:84:66:db:4a:3e:23:68:17:bd:4a:91:7e:
66:f8:79:29:1d:fb:49:5c:3d:39:ed:99:96:81:df:
c4:71:3c:50:e4:78:41:ad:eb:83:fe:4d:d2:fc:74:
80:73:2f:b7:94:d2:cf:89:0b:e4:65:27:45:01:7a:
d6:67:65:02:72:b9:12:90:c9:8e:ab:fb:01:da:5c:
6c:17:f3:94:27:df:c9:8b:52:26:ee:8a:f1:fa:db:
f1:e4:cf:51:6d:d9:e0:11:74:f9:e2:54:7f:d4:56:
d0:59:56:a9:9b:4a:8e:78:90:b4:54:93:3e:13:e8:
b8:29:b3:67:86:08:b1:77:0d:78:25:68:f3:5e:c9:
a4:5f:4a:9f:b0:f5:72:3f:8d:1b:c6:30:5f:c7:4c:
2a:66:0c:c6:53:a2:8e:85:ab:b8:8f:d2:2b:3e:22:
2e:6e:d4:3e:cb:aa:95:a4:a0:cc:db:c0:7a:2e:69:
d3:68:ec:e2:e2:5b:66:69:d8:10:bf:5a:d5:6c:0a:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:01:BD:B8:01:52:47:87:F7:99:D2:28:F1:45:EE:4D:32:CF:3A
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:89:d5:f5:b4:a5:c9:ac:f9:80:ff:03:55:50:07:64:ed:
fe:de:cb:f0:cc:56:53:d1:3a:58:36:03:f3:c9:47:56:fb:46:
a1:c0:75:52:c0:59:7e:c0:b0:5b:09:e9:01:c3:4c:63:81:1c:
a8:9f:e6:f6:4f:f3:5c:9d:66:93:1d:d7:b0:54:d1:d5:1c:0d:
e4:2e:03:05:9e:12:4f:43:57:4f:17:69:6f:96:01:95:15:40:
ee:18:42:fc:44:3e:a1:09:91:fb:64:83:c3:04:fb:4c:fb:31:
52:f9:4f:3a:f6:18:ae:16:ad:b0:9f:1f:96:18:c7:0e:01:a4:
d4:1a:9c:4c:05:d6:31:82:b8:48:a2:dd:42:1f:53:5f:90:e9:
62:93:68:50:1c:4d:77:6f:c4:e6:fc:6f:aa:72:91:28:2d:2c:
fe:b6:5b:28:76:df:36:b6:f5:22:76:2f:1d:54:0b:21:3f:d3:
3a:37:2b:38:8f:af:36:24:61:97:f5:92:96:56:9e:bc:a2:bb:
1e:08:b7:14:e6:fa:ab:d3:b0:80:f6:f8:06:26:60:a5:2c:95:
51:da:65:a8:38:7f:c2:45:34:99:07:3b:4c:88:1f:d0:20:c2:
e5:3d:a7:15:e5:69:f8:84:a5:d6:ff:ed:ae:33:41:a7:59:70:
31:d4:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:31 2026 by rpki-client